Risk Exposed Blog

The Conundrum of Improving Policies vs.
Non-compliance

This is a scenario of events has been dramatized for effect. This illustrates how compliance can be such a strong emotional driver that it can stand in the way of actual progress; especially from an Information Security professional’s perspective, it can be very frustrating.

By way of background, this example company’s previous information security policies were extremely high-level and had no additional guidance or support. As a result, they were not an effective governance ...